opfuchs

opfuchs's Stars

• xnl-h4ck3r/waymore

  Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

  Language:Python1.7k195

• kcustom11/dshield-azure

  Language:HCL3

• jborean93/PSEtw

  PowerShell ETW consumer module

  Language:C#27

• 0xEr3bus/PoolPartyBof

  A beacon object file implementation of PoolParty Process Injection Technique.

  Language:C32039

• rvizx/CVE-2023-30547

  PoC Exploit for VM2 Sandbox Escape Vulnerability

  Language:Python488

• smokeintheshell/CVE-2023-20273

  CVE-2023-20273 Exploit PoC

  Language:Python94

• marcosValle/awesome-windows-red-team

  A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams

  550103

• p0dalirius/LDAPWordlistHarvester

  A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.

  Language:Python33126

• efchatz/pandora

  A red team tool that assists into extracting/dumping master credentials and/or entries from different password managers.

  Language:C++57678

• Neo23x0/sysmon-config

  Sysmon configuration file template with default high-quality event tracing

  45261

• jakabakos/CVE-2023-50164-Apache-Struts-RCE

  A critical security vulnerability, identified as CVE-2023-50164 (CVE: 9.8) was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code execution (RCE).

  Language:Python7821

• Ge0rg3/sans-index-creator

  Tools to automatically create a SANS index based off the course pdf files.

  Language:Python7619

• Leo4j/Invoke-ADEnum

  Automated Active Directory Enumeration

  Language:PowerShell40547

• ranhn/Flink

  Apache Flink多版本远程代码执行漏洞

  Language:Java4

• ionescu007/faxhell

  A Bind Shell Using the Fax Service and a DLL Hijack

  Language:C32286

• Syslifters/sysreptor

  Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

  Language:Python1.5k136

• ihebski/A-Red-Teamer-diaries

  RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

  1.7k300

• ka7ana/CVE-2023-36025

  Quick test for CVE-2023-26025 behaviours

  106

• projectdiscovery/subfinder

  Fast passive subdomain enumeration tool.

  Language:Go10.2k1.3k

• projectdiscovery/httpx

  httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

  Language:Go7.7k833

• projectdiscovery/nuclei

  Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

  Language:Go20.5k2.5k

• projectdiscovery/naabu

  A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

  Language:Go4.7k548

• lord-alfred/ipranges

  🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.

  Language:Shell608101

• Fadi002/de4py

  toolkit for python reverse engineering

  Language:Python85575

• RoseSecurity/WolfPack

  WolfPack combines the capabilities of Terraform and Packer to streamline the deployment of red team redirectors on a large scale.

  Language:HCL11611

• ricardojoserf/WhoamiAlternatives

  Different methods to get current username without using whoami

  Language:C#17215

• Leo4j/Amnesiac

  Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

  Language:PowerShell33955

• RedTeamPentesting/pretender

  Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.

  Language:Go96667

• emdnaia/Babysteps

  Experimental AI gen collection of stacking powershell obfuscation & encryption techniques for oneliners.

  Language:PowerShell3

• OgulcanUnveren/CVE-2023-4357-APT-Style-exploitation

  Apt style exploitation of Chrome 0day CVE-2023-4357

  Language:PHP4221